Back to home

    Privacy Policy

    Last updated: April 20, 2026

    1. Who we are

    This Privacy Policy describes how Lumyf ("we") collects, uses and protects the personal information of users ("you") of the platform, in compliance with the Brazilian General Data Protection Law (LGPD — Law 13.709/2018).

    2. Data we collect

    We collect the following types of data:

    • Account data: name, email and password (encrypted);
    • Resume data: professional information, education, experiences, skills and other data voluntarily entered by you;
    • Technical data: IP address, browser type, device, pages visited and usage time, automatically collected for security and service improvement;
    • Payment data: processed by external partners (payment gateways), without us storing full card details.

    3. How we use your data

    • Allow creating, editing and exporting your resumes;
    • Authenticate access and protect your account;
    • Send operational communications (password recovery, support, important updates);
    • Improve user experience and develop new features;
    • Comply with legal and regulatory obligations.

    4. Data sharing

    We do not sell your personal data. We share information only with:

    • Infrastructure providers (hosting, database, authentication) under confidentiality agreements;
    • Payment gateways, when you make a purchase;
    • Public authorities, upon legal or judicial order.

    5. Storage and security

    Your data is stored on secure servers, with encryption in transit (HTTPS) and at rest. We adopt technical and organizational measures to prevent unauthorized access, loss, alteration or undue disclosure.

    6. Your rights as a data subject

    Under LGPD, you may, at any time, request:

    • Confirmation of the processing of your data;
    • Access, correction or update of your data;
    • Anonymization, blocking or deletion of unnecessary data;
    • Data portability to another provider;
    • Withdrawal of consent and deletion of data processed under consent.

    Requests can be made through our platform support channels.

    7. Cookies

    We use essential cookies for the operation of the Service and analytical cookies to understand how the platform is used. You can manage cookies in your browser settings.

    8. Data retention

    We keep your data for as long as needed to provide the Service or as required by law. After account deletion, personal data is removed within 30 days, unless legally required to retain.

    9. Children and minors

    Lumyf is not intended for children under 14. We do not knowingly collect data from minors. If we identify a minor's account without guardian authorization, the account will be removed.

    10. Changes to this Policy

    This Policy may be updated periodically. We recommend revisiting this page often. Significant changes will be notified by email or notice on the platform.

    11. Contact our DPO

    To exercise your rights or clarify questions about your data processing, contact us through the platform support channels.